Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: ZFlRW2v0GYOh5zKEFVDiyU+I/VbF1akJRjjg9szm1zI=
Subject key identifier: FD:42:3D:79:6A:28:1A:89:0A:54:56:B8:4C:32:97:17:1A:E0:13:57
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 01988E7D60C828E786666594113D2F56BC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 0215
Signing time: Sat 09 Aug 2025 11:00:38 +0000
Manifest this update: Sat 09 Aug 2025 11:00:38 +0000
Manifest next update: Sun 10 Aug 2025 11:00:38 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: Aob6Fjj3C1zTJWQvtFwyCbNh3xkgJakmfQ/ZtjfLM7Q=)
3: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:60:c8:28:e7:86:66:65:94:11:3d:2f:56:bc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Aug 9 11:00:38 2025 GMT
Not After : Aug 10 11:00:38 2025 GMT
Subject: CN=fd423d796a281a890a5456b84c3297171ae01357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:1a:2f:ee:69:df:8a:87:3a:64:30:e9:47:
3d:76:50:93:cd:e7:1d:34:c6:e6:13:3f:40:71:d5:
5a:15:55:1b:ec:5a:36:3c:3c:ed:d2:1e:d9:d0:87:
ea:1f:8e:c1:a4:8b:68:ef:cf:20:fa:4f:7f:79:74:
a9:96:65:61:49:6b:8d:36:a6:bd:b4:2b:be:a1:fb:
0a:51:69:f0:7d:de:a4:39:91:76:e4:af:90:1d:8d:
b0:ec:cb:7c:ab:70:35:b8:72:b4:96:aa:6e:19:f5:
13:4f:c7:0a:58:04:e8:05:51:37:d4:2f:1a:2d:c9:
c4:31:37:13:11:fe:e2:22:71:3b:3d:55:dc:74:8e:
bd:35:b6:73:4a:39:e9:ad:af:e7:9e:04:d6:3a:b2:
3c:40:88:70:e3:9d:2d:cc:81:5e:bc:79:85:75:f8:
8f:ca:5e:f2:bd:db:d5:b6:7c:14:67:33:0d:77:a3:
d0:e6:f6:93:bc:40:6b:8a:5a:8f:45:11:bc:08:f9:
87:00:10:ab:ad:d0:4f:a3:c9:66:48:18:e9:7e:e9:
04:ff:28:84:b0:d1:d1:b9:2b:93:b1:9a:90:24:c8:
95:c5:cc:93:67:e9:18:d9:4d:bd:a9:5a:40:79:bf:
eb:44:e2:04:66:d9:93:c1:67:49:96:a7:e1:f2:93:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:42:3D:79:6A:28:1A:89:0A:54:56:B8:4C:32:97:17:1A:E0:13:57
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:07:fe:a8:ab:39:c0:7c:f4:dc:c0:ff:56:59:c3:08:ce:62:
3e:38:b9:f0:97:14:a8:2a:c2:c5:e9:86:71:1a:da:4f:88:7d:
a8:9a:f1:4d:cb:a1:4e:eb:63:0d:7b:39:62:86:d3:ac:2e:9c:
77:86:af:cb:34:aa:b7:f6:47:3b:9a:5e:5d:f3:e3:6b:e6:ff:
36:e6:18:dc:90:ca:1e:6b:b5:53:2d:32:9b:9b:4c:93:6a:15:
24:76:de:99:38:61:aa:18:af:12:66:d7:88:fe:6a:23:77:c7:
7e:31:40:4a:9a:c2:e9:36:e4:ed:33:6b:eb:32:c3:1e:ed:cc:
02:ef:c5:1b:70:3b:13:63:00:a0:7b:8f:73:36:8d:3c:30:35:
da:85:72:e4:2c:9b:c8:3e:06:83:3f:b5:24:37:0c:1f:75:19:
05:7a:1b:f3:eb:c3:14:f0:18:ef:35:b1:a4:6d:e3:39:b3:77:
1a:68:de:1a:2c:c4:86:1b:98:97:57:ec:a2:2e:e5:64:5c:fa:
c3:f1:c3:f9:ca:5c:6c:fe:22:3f:95:c2:b3:bf:7a:ad:f3:17:
5c:51:41:83:7f:36:44:db:32:14:5d:6d:2b:04:80:bb:07:87:
12:47:32:d4:d1:e2:1a:07:99:3d:f8:44:8a:7b:de:2a:7c:2c:
fb:35:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:42:47 2025 by rpki-client